Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/3138372e3132302e3136302e302f32322d3332203d3e20323730353439.roa
File:                     3138372e3132302e3136302e302f32322d3332203d3e20323730353439.roa (raw, json)
Hash identifier:          +GvHqNmvXcEhTPX7ynddC+U0qUnkMEua6d3OVXRrLrc=
Subject key identifier:   4C:8A:99:D0:42:A0:99:09:42:E8:96:35:CE:ED:2C:F2:0E:7B:8D:96
Certificate issuer:       /CN=CD8C447FF133EB21C0315B78AB00573F23F7A647
Certificate serial:       5E2BF357DEDFEA82E48A823B9C1C255DF28BF0D5
Authority key identifier: CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C447FF133EB21C0315B78AB00573F23F7A647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/3138372e3132302e3136302e302f32322d3332203d3e20323730353439.roa
Signing time:             Thu 05 Sep 2024 14:34:42 +0000
ROA not before:           Thu 05 Sep 2024 14:29:42 +0000
ROA not after:            Thu 04 Sep 2025 14:34:42 +0000
asID:                     270549
IP address blocks:        187.120.160.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2b:f3:57:de:df:ea:82:e4:8a:82:3b:9c:1c:25:5d:f2:8b:f0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8C447FF133EB21C0315B78AB00573F23F7A647
        Validity
            Not Before: Sep  5 14:29:42 2024 GMT
            Not After : Sep  4 14:34:42 2025 GMT
        Subject: CN=4C8A99D042A0990942E89635CEED2CF20E7B8D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:71:3f:24:09:85:98:dc:f2:24:b6:b4:40:
                    31:98:b8:4f:44:f7:49:ff:64:6f:61:05:0f:0f:3b:
                    54:b1:37:17:1e:3d:33:d3:1f:50:0d:fb:6f:0f:52:
                    7d:c7:e5:10:48:ce:4c:07:63:78:0b:66:46:b6:9f:
                    51:99:86:08:dc:7a:7f:75:58:73:28:47:d1:f4:f6:
                    b1:82:88:d5:ec:9b:76:af:aa:f4:c3:ca:63:e5:04:
                    d7:9e:21:cd:98:e2:a8:6a:e9:ef:68:12:dc:1c:34:
                    31:f4:1f:7d:1b:56:49:7d:6b:f6:ab:89:f5:20:0a:
                    0a:7f:26:6d:88:d2:63:5f:9f:2c:33:0b:67:d7:11:
                    7a:b3:00:41:e4:61:b6:f1:19:07:33:94:27:b6:21:
                    55:a1:18:bf:24:77:05:45:f9:71:9b:87:72:93:24:
                    8c:4c:32:6c:da:4c:31:d8:3c:15:30:85:05:fd:dc:
                    74:ed:a6:66:5b:e1:2e:82:3e:d6:2e:42:3f:19:dc:
                    59:34:e7:f3:7e:65:d4:a3:c2:e2:cf:a6:fc:ed:83:
                    67:42:5f:56:d6:44:d8:fc:bf:2e:a1:bc:af:fe:19:
                    00:c9:d1:2f:e5:36:a2:45:bc:2a:da:20:ad:29:90:
                    b2:22:c4:94:ed:98:76:43:d6:56:73:f0:aa:64:97:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8A:99:D0:42:A0:99:09:42:E8:96:35:CE:ED:2C:F2:0E:7B:8D:96
            X509v3 Authority Key Identifier:
                keyid:CD:8C:44:7F:F1:33:EB:21:C0:31:5B:78:AB:00:57:3F:23:F7:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/CD8C447FF133EB21C0315B78AB00573F23F7A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8C447FF133EB21C0315B78AB00573F23F7A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wjoaso42gushYLKX4LQ4zQvzFfigWZjuw6UVJgLqSkv/0/3138372e3132302e3136302e302f32322d3332203d3e20323730353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:ed:41:25:92:3d:04:d2:2a:aa:a0:07:e5:6e:23:c0:cb:
         2a:43:1a:1b:0d:02:10:c3:6d:8f:41:b6:1c:89:3d:d4:af:d6:
         53:b6:04:af:df:b4:4c:ff:1f:76:04:7b:51:da:58:7d:a8:c2:
         91:1c:2e:99:be:92:a9:a9:c6:e1:02:e6:2c:55:19:d0:3d:6d:
         d8:26:18:30:86:b2:e7:f2:3d:3a:04:62:4d:f3:e8:05:26:5e:
         4f:a2:16:77:94:4f:27:ae:27:99:42:07:5a:06:e1:c3:3b:05:
         4a:95:56:40:c8:ba:9f:ee:a8:05:5b:0c:8a:e9:28:76:60:4e:
         d0:50:0f:60:6e:85:ff:90:7a:65:7d:f1:08:30:d7:e4:68:50:
         e1:a4:76:da:e8:f6:38:cb:65:82:00:72:9a:13:89:08:9f:39:
         61:e8:6c:8e:6f:78:99:b5:08:1c:da:5e:d6:09:e1:73:38:9d:
         50:e3:df:77:4f:16:b3:ed:03:bc:03:98:8c:5f:d4:9f:b7:00:
         58:12:d5:85:a7:42:a3:35:ef:67:e6:02:fa:43:2a:b0:15:71:
         2f:c6:4e:c3:1d:58:82:a1:49:dd:c3:45:bf:87:37:36:3f:fe:
         da:b9:b2:f9:03:a7:a8:0b:13:a0:d3:10:04:29:42:f2:e2:7e:
         b3:1d:08:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----